Siddhant Sawalka

Associate Consultant

Bengaluru, Karnataka, India5 yrs 10 mos experience

Key Highlights

Over 3 years of cybersecurity consulting experience.
Expert in web, API, and mobile application security testing.
Strong mentoring and documentation skills.

Stackforce AI infers this person is a Cybersecurity Consultant specializing in application security assessments.

Contact

Skills

Core Skills

Web Application Security TestingApi Security Testing

Other Skills

Mobile Application Security TestingThick-Client Security TestingVulnerability AssessmentPenetration TestingSecurity DocumentationBurp SuiteSQLMapZAP ProxyCyber-securityVulnerability Assessment and Penetration Testing (VAPT)Kali LinuxTenable NessusC++C (Programming Language)Java

About

I am a Cyber Security Consultant with over 3 years of experience in the cybersecurity domain, I specialize in security assessments across Web, API, Mobile (iOS & Android), and Thick-client applications. I’ve worked on a wide range of projects that require deep technical understanding, strong analytical thinking, and the ability to communicate effectively with technical teams. My role involves conducting in-depth security testing, identifying potential risks, and helping ensure secure application development. Alongside technical execution, I also contribute to improving documentation, guiding remediation efforts, and supporting collaboration across teams to achieve security goals efficiently. Core Skills: Web Application Security Testing API Security Testing Mobile Application Security Testing (iOS & Android) Thick-Client Security Testing I’m passionate about continuous learning and exploring new tools, technologies and methodologies to stay current in the evolving security landscape and improve my effectiveness as a security professional

Experience

5 yrs 10 mos

Total Experience

1 yr 8 mos

Average Tenure

9 mos

Current Experience

Ultraviolet cyber

Offensive Security Services, Senior Consultant

Sep 2025 – Present · 9 mos · Bengaluru · On-site

(Formely SynopsysSIG)
I independently handle complex security assessments—from understanding the scope and planning the test approach to identifying critical vulnerabilities and helping clients fix them. In this role, I focus not just on finding issues, but on ensuring the overall process is smooth, clear, and effective.
I work closely with clients to understand their needs, define clear goals, and support secure releases across web, API, mobile, and thick-client applications. Internally, I help improve create clear security documentation, and lead knowledge-sharing sessions to speed up onboarding and boost team performance. I also enjoy mentoring and supporting others, helping the team grow together.
My role has allowed me to take on more responsibility, solve more complex challenges, and make a bigger impact.

Web Application Security TestingAPI Security TestingMobile Application Security TestingThick-Client Security TestingVulnerability AssessmentPenetration Testing+1

Black duck

2 roles

Professional Services Consulting, Senior Consultant

Promoted

Mar 2025 – Aug 2025 · 5 mos

(Formely SynopsysSIG) I independently handle complex security assessments—from understanding the scope and planning the test approach to identifying critical vulnerabilities and helping clients fix them. In this role, I focus not just on finding issues, but on ensuring the overall process is smooth, clear, and effective.
I work closely with clients to understand their needs, define clear goals, and support secure releases across web, API, mobile, and thick-client applications. Internally, I help improve create clear security documentation, and lead knowledge-sharing sessions to speed up onboarding and boost team performance. I also enjoy mentoring and supporting others, helping the team grow together.
My role has allowed me to take on more responsibility, solve more complex challenges, and make a bigger impact.

Web Application Security TestingAPI Security TestingMobile Application Security TestingThick-Client Security TestingVulnerability AssessmentPenetration Testing+1

Professional Services Consulting, Consultant

Oct 2024 – Feb 2025 · 4 mos

I led comprehensive manual and automated penetration testing efforts using tools like Burp Suite, SQLMap, and ZAP Proxy—successfully delivering multiple web application, API , mobile app and thick-client assessments for a key client. These engagements fortified security across 30+ long-term contracts by proactively identifying and remediating critical vulnerabilities such as SQL Injection, Account Takeover, and Business Logic flaws. I consistently ensured high-quality deliverables under tight deadlines while managing multiple assessments simultaneously. I also took initiative in mentoring and training two interns, enhancing team capabilities and knowledge-sharing. Additionally, I strengthened security documentation by detailing critical issues and providing actionable remediation strategies, significantly accelerating resolution times.

Burp SuiteSQLMapZAP ProxyWeb Application Security TestingAPI Security TestingMobile Application Security Testing+1

Synopsys inc

2 roles

Professional Services Consulting, Consultant

Jul 2022 – Sep 2024 · 2 yrs 2 mos

I led comprehensive manual Android automated penetration testing efforts using tools like Burp Suite, SQLMap, and ZAP Proxy—successfully delivering multiple web application, API , mobile app and thick-client assessments for a key client. These engagements fortified security across 30+ long-term contracts by proactively identifying and remediating critical vulnerabilities such as SQL Injection, Account Takeover, and Business Logic flaws. I consistently ensured high-quality deliverables under tight deadlines while managing multiple assessments simultaneously. I also took initiative in mentoring and training two interns, enhancing team capabilities and knowledge-sharing. Additionally, I strengthened security documentation by detailing critical issues and providing actionable remediation strategies, significantly accelerating resolution times.

Burp SuiteSQLMapZAP ProxyWeb Application Security TestingAPI Security TestingMobile Application Security Testing+1